Invoice System In Laravel

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:invoice_system_in_laravel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductInvoice System In Laravel (72566f78-2829-5027-8141-6fb280ce5632)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7110 vulnerable 2026-06-08 08:07:05.399652 code-projects Invoice System in Laravel item cross site scripting
LOW (3.5)
A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-04-27T09:30:14.579Z
Updated: 2026-04-29T13:50:02.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7109 vulnerable 2026-06-08 08:07:05.399177 code-projects Invoice System in Laravel API Endpoint item improper authorization
MEDIUM (5.3)
A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-04-27T09:15:10.680Z
Updated: 2026-04-27T10:19:19.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7108 vulnerable 2026-06-08 08:07:05.398855 code-projects Invoice System in Laravel cross-site request forgery
MEDIUM (4.3)
A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-04-27T09:00:18.809Z
Updated: 2026-04-27T12:05:28.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7107 vulnerable 2026-06-08 08:07:05.398415 code-projects Invoice System in Laravel company unrestricted upload
MEDIUM (6.3)
A weakness has been identified in code-projects Invoice System in Laravel 1.0. The impacted element is an unknown function of the file /company. This manipulation of the argument logo causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-27T08:45:10.844Z
Updated: 2026-04-27T13:29:11.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7093 vulnerable 2026-06-08 08:07:05.381470 code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization
MEDIUM (6.3)
A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2026-04-27T06:00:16.743Z
Updated: 2026-04-27T12:28:25.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7092 vulnerable 2026-06-08 08:07:05.380734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7091 vulnerable 2026-06-08 08:07:05.380277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.